Auto-blocked by IT Solutions USA security proxy after malicious web-shell/backdoor scanning and atta ...
show moreAuto-blocked by IT Solutions USA security proxy after malicious web-shell/backdoor scanning and attack probes. Requests blocked (403).
show less
2026-09-06 18:26:02.691855-0500 localhost sshd-session[65056]: Failed password for root from 82.79. ...
show more2026-09-06 18:26:02.691855-0500 localhost sshd-session[65056]: Failed password for root from 82.79.238.166 port 49236 ssh2
show less
2026-09-06T23:06:47.570297+00:00 ubuntu sshd[37608]: Invalid user ppp from 82.79.238.166 port 58530
...
show more2026-09-06T23:06:47.570297+00:00 ubuntu sshd[37608]: Invalid user ppp from 82.79.238.166 port 58530
2026-09-06T23:06:47.629547+00:00 ubuntu sshd[37608]: Received disconnect from 82.79.238.166 port 58530:11: Normal Shutdown, Thank you for playing [preauth]
...
show less
Sep 7 00:37:10 vpn sshd[41030]: Invalid user ppp from 82.79.238.166 port 34650
Sep 7 00:37:15 vpn ...
show moreSep 7 00:37:10 vpn sshd[41030]: Invalid user ppp from 82.79.238.166 port 34650
Sep 7 00:37:15 vpn sshd[41047]: User root from 82.79.238.166 not allowed because not listed in AllowUsers
Sep 7 00:37:21 vpn sshd[41070]: User root from 82.79.238.166 not allowed because not listed in AllowUsers
...
show less
2026-09-06T15:50:51.843029-06:00 b146-61 sshd[144986]: pam_sss(sshd:auth): authentication failure; l ...
show more2026-09-06T15:50:51.843029-06:00 b146-61 sshd[144986]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.79.238.166 user=ppp
2026-09-06T15:50:53.983692-06:00 b146-61 sshd[144986]: Failed password for invalid user ppp from 82.79.238.166 port 40476 ssh2
2026-09-06T15:50:58.345021-06:00 b146-61 sshd[144991]: User root from 82.79.238.166 not allowed because none of user's groups are listed in AllowGroups
...
show less
Sep 6 22:19:15 phonebook-lb01.phonebook.srvfarm.net sshd[2000812]: Invalid user ppp from 82.79.238. ...
show moreSep 6 22:19:15 phonebook-lb01.phonebook.srvfarm.net sshd[2000812]: Invalid user ppp from 82.79.238.166 port 54532
Sep 6 22:19:15 phonebook-lb01.phonebook.srvfarm.net sshd[2000812]: Disconnected from invalid user ppp 82.79.238.166 port 54532 [preauth]
Sep 6 22:19:19 phonebook-lb01.phonebook.srvfarm.net sshd[2000836]: Disconnected from authenticating user root 82.79.238.166 port 54538 [preauth]
Sep 6 22:19:26 phonebook-lb01.phonebook.srvfarm.net sshd[2000874]: Disconnected from authenticating user root 82.79.238.166 port 43690 [preauth]
Sep 6 22:19:32 phonebook-lb01.phonebook.srvfarm.net sshd[2000905]: Disconnected from authenticating user root 82.79.238.166 port 53768 [preauth]
show less
2026-09-06T19:44:18.903331+00:00 ZRH-1 sshd[1277790]: Invalid user ppp from 82.79.238.166 port 48898 ...
show more2026-09-06T19:44:18.903331+00:00 ZRH-1 sshd[1277790]: Invalid user ppp from 82.79.238.166 port 48898
2026-09-06T19:45:41.069148+00:00 ZRH-1 sshd[1277839]: Invalid user admin from 82.79.238.166 port 41042
2026-09-06T19:45:47.132213+00:00 ZRH-1 sshd[1277843]: Invalid user developer from 82.79.238.166 port 41050
2026-09-06T19:45:53.566088+00:00 ZRH-1 sshd[1277845]: Invalid user robin from 82.79.238.166 port 52598
2026-09-06T19:46:06.185656+00:00 ZRH-1 sshd[1277855]: Invalid user um from 82.79.238.166 port 41536
...
show less
2026-09-06T13:38:35.072715-06:00 b146-24 sshd[1200185]: pam_sss(sshd:auth): authentication failure; ...
show more2026-09-06T13:38:35.072715-06:00 b146-24 sshd[1200185]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.79.238.166 user=ppp
2026-09-06T13:38:36.737430-06:00 b146-24 sshd[1200185]: Failed password for invalid user ppp from 82.79.238.166 port 41410 ssh2
2026-09-06T13:38:38.512537-06:00 b146-24 sshd[1200192]: User root from 82.79.238.166 not allowed because none of user's groups are listed in AllowGroups
...
show less
Automated report by DataDream Sentinel.
Repeated SSH authentication failures consistent with credent ...
show moreAutomated report by DataDream Sentinel.
Repeated SSH authentication failures consistent with credential brute-force activity were detected against infrastructure monitored by DataDream.
6 failed-authentication event references were correlated between 2026-09-06 19:15:46 and 19:15:55 UTC.
No successful SSH authentication was observed in the available telemetry.
Reference: DD-AIPDB-20260906-AB82F25C
show less
2026-09-06T11:52:32.494256-07:00 server.vexstria.pro sshd[1212986]: Failed password for invalid user ...
show more2026-09-06T11:52:32.494256-07:00 server.vexstria.pro sshd[1212986]: Failed password for invalid user ppp from 82.79.238.166 port 34374 ssh2
2026-09-06T11:52:34.679314-07:00 server.vexstria.pro sshd[1214950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.79.238.166 user=root
2026-09-06T11:52:36.640389-07:00 server.vexstria.pro sshd[1214950]: Failed password for root from 82.79.238.166 port 40736 ssh2
...
show less
2026-09-06T12:40:44.416730-06:00 b146-51 sshd[1530603]: pam_sss(sshd:auth): authentication failure; ...
show more2026-09-06T12:40:44.416730-06:00 b146-51 sshd[1530603]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.79.238.166 user=ppp
2026-09-06T12:40:46.241808-06:00 b146-51 sshd[1530603]: Failed password for invalid user ppp from 82.79.238.166 port 39610 ssh2
2026-09-06T12:40:51.757614-06:00 b146-51 sshd[1530610]: User root from 82.79.238.166 not allowed because none of user's groups are listed in AllowGroups
...
show less